Mwdb-core

**Upgrade highlights:**

If you use plugins that are adding new endpoints to the API, you need to fix `Resource` imports before upgrade: [What's changed](https://mwdb.readthedocs.io/en/latest/whats-changed.html#important-change-replaced-flask-restful-with-own-lightweight-implementation)

**New features and improvements:**

- Support for Prometheus metrics (https://github.com/CERT-Polska/mwdb-core/pull/908, [Prometheus metrics docs](https://mwdb.readthedocs.io/en/latest/prometheus-guide.html))
- Refactored search engine to improve search performance for configs, attributes and file names (https://github.com/CERT-Polska/mwdb-core/pull/906)
- UI: changed attribute adding modal to always show preview and make JSON values less concerning (https://github.com/CERT-Polska/mwdb-core/pull/921)
- Limited default verbosity of logs (https://github.com/CERT-Polska/mwdb-core/pull/909, see [note about enable_debug_log](https://mwdb.readthedocs.io/en/latest/whats-changed.html#important-change-changes-in-logging-introduced-prometheus-metrics))
- Added support for `execute` attribute that is passed to Karton to enable/disable execution in sandbox (https://github.com/CERT-Polska/mwdb-core/pull/904, thanks msm-cert)
- Flask-Limiter was replaced with direct use of limits library (https://github.com/CERT-Polska/mwdb-core/pull/915)
- Dropped usage of Flask-Restful (https://github.com/CERT-Polska/mwdb-core/pull/916)

**Bug fixes**:

- Fix: installation issues on Debian 12 (bumped psycopg2-binary to 2.9.9, https://github.com/CERT-Polska/mwdb-core/pull/922)
- Fix: ISE 500 on user removal (https://github.com/CERT-Polska/mwdb-core/pull/913)
- Fix: Don't treat 0 number as an empty attribute value (https://github.com/CERT-Polska/mwdb-core/pull/920)
- Fix: MWDB doesn't surrender on Karton when can't be loaded eagerly and tries to load it lazily (https://github.com/CERT-Polska/mwdb-core/pull/919)
- Web: Fixed race condition with applying request_timeout value (https://github.com/CERT-Polska/mwdb-core/pull/905)

**Full Changelog**: https://github.com/CERT-Polska/mwdb-core/compare/v2.11.0...v2.12.0

**New features and improvements:**

- Simple UI for uploading configurations and blobs (by postrowinski in https://github.com/CERT-Polska/mwdb-core/pull/803)
- Object tabs are extendable via plugins (by yankovs in https://github.com/CERT-Polska/mwdb-core/pull/896)
- Bump karton-core to v5.3.2 (by yankovs in https://github.com/CERT-Polska/mwdb-core/pull/902)

**Full Changelog**: https://github.com/CERT-Polska/mwdb-core/compare/v2.10.3...v2.11.0

Bugfixes:

- Bumped Werkzeug to 3.0.1 including critical fix for very slow upload of huge files having speciifc layout (see https://github.com/CERT-Polska/mwdb-core/pull/885)
- Fixed uneditable parent field in Upload view (https://github.com/CERT-Polska/mwdb-core/pull/879)

Bugfixes:

- Fixed default web_bundle_dir so webapp works correctly in standalone PyPi installation (https://github.com/CERT-Polska/mwdb-core/pull/873)

Most important change in this bugfix release is rollback to libfuzzy2 for ssdeep hash evaluation instead of ppdeep introduced in v2.9.0. It means that **for standalone installation (from PyPi) you need to install `libfuzzy2`** before applying this upgrade.

Bugfixes:
- Removed `ppdeep` dependency in favor of previously used `python-ssdeep` (libfuzzy2) that caused worker timeouts when big file (>30MB) was uploaded (https://github.com/CERT-Polska/mwdb-core/pull/868)
- Search in Search tab wasn't working (https://github.com/CERT-Polska/mwdb-core/pull/871)
- Fixed flickering and showing wrong results when user navigated to query URL (https://github.com/CERT-Polska/mwdb-core/pull/867)
- Fixed multiple issues in Rich attributes:
- wrong search URL for searchable fields in lists (https://github.com/CERT-Polska/mwdb-core/pull/869)
- search link was not rendering correctly when searchable field value contained space (https://github.com/CERT-Polska/mwdb-core/pull/870)

Other changes:
- included PID argument and before_request entries in log (https://github.com/CERT-Polska/mwdb-core/pull/861)

Small, minor release that provides bugfixes and Karton integration improvements:

It's recommended to upgrade karton-system to v5.2.0 before upgrading mwdb-core (if Karton is used within your pipeline).

**Minor improvements:**

- Karton: `quality` and `share_3rd_party` headers are using persistent headers and they're automatically added to all tasks within analysis (https://github.com/CERT-Polska/mwdb-core/pull/858)
- Bumped Karton to v5.2.0

**Bugfixes:**

- Fixed issues related with "hex" sample preview mode (https://github.com/CERT-Polska/mwdb-core/pull/859)
- Bumped PyYAML to v6.0.1 solving installation problems related with Cython release (https://github.com/CERT-Polska/mwdb-core/pull/857)